topic Re: Shared Secret in clear text in Firewall and Security Management

Shared Secret in clear text

Ni_c — Thu, 22 Mar 2018 16:20:53 GMT

Hi there,

is there a way that we can see shared secret key in clear text for site to site VPN in R80.10 management server?

Regards,

Nagarjuna

Re: Shared Secret in clear text

Danny — Thu, 22 Mar 2018 16:25:11 GMT

Of Course. In R80.10, simply click 'IPsec VPN > Edit secrets' > Edit > Set / View your secret.

Re: Shared Secret in clear text

Ni_c — Thu, 22 Mar 2018 16:42:55 GMT

Can you tell me how it is. I know in previous versions if we click on the shared secret it will show the key in clear text. But this is not working in R80.10

Re: Shared Secret in clear text

PhoneBoy — Thu, 22 Mar 2018 17:39:23 GMT

We removed the ability to see the shared secret in SmartDashboard/SmartConsole sometime in the R65 timeframe.

Re: Shared Secret in clear text

Danny — Thu, 22 Mar 2018 18:20:13 GMT

Um, no. See my screen shot above.

Re: Shared Secret in clear text

Chris_Hoff — Thu, 22 Mar 2018 18:50:49 GMT

Are you trying to edit it within the VPN community? If you look above, Danny is editing the Shared Secret within the Gateway. Try that if you have not already.

Re: Shared Secret in clear text

Ni_c — Thu, 22 Mar 2018 21:10:07 GMT

Thanks Danny, But apparently this is only for traditional mode VPN's.

Re: Shared Secret in clear text

Danny — Thu, 22 Mar 2018 21:37:00 GMT

You just asked for a way to see shared secrets within R80.10. This is a way.

Re: Shared Secret in clear text

Maarten_Sjouw — Fri, 23 Mar 2018 22:08:46 GMT

Maybe it came back in R80.10 but it certainly is unreadable in R77.30

Re: Shared Secret in clear text

Olavi_Lentso — Thu, 03 May 2018 07:26:03 GMT

When not using traditional mode, then Danny's guide does not give results neither in R80.10 and R77.30. Several versions back it was possible to see the pre-shared secret and it was damn convenient

Re: Shared Secret in clear text

Don_Paterson — Wed, 27 Feb 2019 15:21:31 GMT

Hi Nagarjuna,

Did you ever find a solution to this?

Thanks,

Don

Re: Shared Secret in clear text

Ni_c — Wed, 27 Feb 2019 17:44:17 GMT

Hi Don,

It is only possible for traditional mode VPN’s in R80.10

Re: Shared Secret in clear text

Dale_Lobb — Mon, 04 Mar 2019 06:16:44 GMT

This may not be useful to you, depending on your particular situation, but I recently (last year) had to recover some shared secrets for VPNs that had been around for a very long time. I was able to do so because I still had (on my R77.30 management system,) some database revisions dating back prior to the advent of R67.

I extracted a policy revision made under R62 (its just a tarball). I obtained the R62 installation ISO from a checkpoint partner and installed it into a VMWare VM using "Other 2.4.x kernel Linux, 32 bit" as the OS specification. I then overwrote the R62 installation with the extracted tarball files from the R62 policy DB revision. Then started up via cpstart.

I was able to access the policy of the VM using R62 Dashboard and extract the ancient shared secrets which now safely reside in an encrypted password vault.

Obviously, the stars all aligned exactly to make this work for me, but who knows, maybe you still have an old backup or DB revision or migrate export from prior to R67?

Re: Shared Secret in clear text

mrktgb — Thu, 07 Apr 2022 03:55:40 GMT

Looks like this is gone in 81.10.